last executing test programs: 1m10.429721816s ago: executing program 4 (id=592): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 31.126002924s ago: executing program 4 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x30) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) syz_io_uring_setup(0x592a, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001980)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000700"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{r3}, 0x0, &(0x7f0000002ec0)}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086200, &(0x7f00000001c0)='\a\x00\x00\x00\x00\x00\x00\x00-control\x00') 28.935825731s ago: executing program 4 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, {@in6=@empty, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}}, 0xf0}}, 0x0) r5 = eventfd2(0x0, 0x0) write$eventfd(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xef, 0x8, 0x0, 0xfd, @time, {}, {}, @control}], 0x1c) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0xc) 26.900480303s ago: executing program 4 (id=682): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000010c0)=0x11, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x64c, &(0x7f0000001500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ba6224a681808004700003000000000000690788d141400ac1e0001860600000000000000000000fbe7eff19ba53945f5c76764f4164f369d48543bd234f2b6b86bb575056d0b3ad376466083399b199ed44959de6f671a480d998316be6bb7f848813cc91e705a2bf3c03748ed82a83841802cfbc15c500887d3aa6d27238024c0b35114a69a53a6cb44196239", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="75746638afe09152040a2903302c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c6e6f6e756d6461696c3d302c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c726f6469722c747a3d5554432c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e66733d6e6f7374616c655f726f2c726f6469722c646f733178666c6f7070792c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c00"], 0x6, 0x2d2, &(0x7f00000008c0)="$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") 23.313366379s ago: executing program 4 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, {@in6=@empty, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}}, 0xf0}}, 0x0) r5 = eventfd2(0x0, 0x0) write$eventfd(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xef, 0x8, 0x0, 0xfd, @time, {}, {}, @control}], 0x1c) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0xc) 22.408841058s ago: executing program 4 (id=696): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="10", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="0bd3", 0x2}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000000000001"], 0x18}}], 0x1, 0x4c051) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) pipe(&(0x7f0000001800)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x14, r9, 0x1}, 0x14}}, 0x0) 10.29703591s ago: executing program 3 (id=729): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000009c0)={[{@errors_remount}, {@nodiscard}, {@grpquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@noauto_da_alloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getsig(0x4202, r4, 0xfffffffffffffffc, &(0x7f00000007c0)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="7e28ce7182da00d5dfe6d94af5c62e000000000000dfe793"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x6, 0x0, 0x0, 0x0, "0200"}}, 0x48}, 0x1, 0x0, 0x0, 0x24004080}, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r6, 0x65, 0x2, 0x0, 0x20000028) bind$tipc(0xffffffffffffffff, 0x0, 0xffffffffffffff87) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 9.155889353s ago: executing program 2 (id=737): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb1, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000e4ff000000000000ffff00001811000088d637f874b53c8bf5c5b693ac955731130e7a61c2078398d0", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001860000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000185100000b0000000000000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x66, &(0x7f0000000280)=""/102, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0xd, 0x183, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)=[{0x7, 0x3, 0x0, 0x6}], 0x10, 0x5, @void, @value}, 0x94) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) read(r4, &(0x7f00000002c0)=""/196, 0xc4) 7.609183446s ago: executing program 2 (id=741): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@rand_addr=0x64010100}, {@empty, 0x6}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xb, 0x0, [@remote, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.834325123s ago: executing program 1 (id=742): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x353]}) 6.695861527s ago: executing program 2 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x3aaeed48e614af2d, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.924068533s ago: executing program 1 (id=744): setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x9) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) statx(r0, 0x0, 0x4000, 0x10, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 4.994395435s ago: executing program 3 (id=745): fchdir(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000000c0)={[{@init_itable}, {@grpquota}]}, 0x44, 0x4eb, &(0x7f0000000540)="$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") 4.757138499s ago: executing program 0 (id=746): open(0x0, 0x40004c242, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r0], 0x398}}, 0x0) 4.756731029s ago: executing program 1 (id=747): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad000000000085100000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.574961657s ago: executing program 0 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)={0x10, 0x25, 0x20, 0x1, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x20, 0x4000000}, 0x4000400) 4.535907401s ago: executing program 3 (id=749): recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1ffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) write$UHID_INPUT(r5, &(0x7f0000002800)={0xc, {"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", 0x1000}}, 0x1006) 4.410000853s ago: executing program 0 (id=750): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/158, 0x9e}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x2d, 0x4) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.180985097s ago: executing program 1 (id=751): mount(0x0, 0x0, &(0x7f0000000180)='cramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000780)=0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0xa70410b) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) 2.723800801s ago: executing program 1 (id=752): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x20040a, &(0x7f0000000280)={[{@grpjquota}, {@nojournal_checksum}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.715114771s ago: executing program 2 (id=753): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x353]}) 2.686678094s ago: executing program 0 (id=754): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getsig(0x4202, r4, 0xfffffffffffffffc, &(0x7f00000007c0)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="7e28ce7182da00d5dfe6d94af5c62e000000000000dfe793"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x6, 0x0, 0x0, 0x0, "0200"}}, 0x48}, 0x1, 0x0, 0x0, 0x24004080}, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r6, 0x65, 0x2, 0x0, 0x20000028) bind$tipc(0xffffffffffffffff, 0x0, 0xffffffffffffff87) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.491518594s ago: executing program 3 (id=755): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@struct, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000100)=""/219, 0x3c, 0xdb, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, 0x0) 1.593166433s ago: executing program 2 (id=756): syz_open_dev$sndctrl(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4}) 674.692904ms ago: executing program 3 (id=757): open(0x0, 0x40004c242, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r0], 0x398}}, 0x0) 251.349636ms ago: executing program 2 (id=758): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='io\x00') pread64(r5, &(0x7f00000004c0)=""/251, 0xfb, 0x4) getgroups(0x0, 0x0) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807000000010000", 0x17) 153.419396ms ago: executing program 0 (id=759): setresuid(0x0, 0x0, 0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)={0x10, 0x25, 0x20, 0x1, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x4000000}, 0x4000400) 38.045807ms ago: executing program 1 (id=760): r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) 37.349597ms ago: executing program 3 (id=761): mount(0x0, 0x0, &(0x7f0000000180)='cramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000780)=0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0xa70410b) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0x13) 0s ago: executing program 0 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x3aaeed48e614af2d, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): 9834][ T4921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.471424][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.690305][ T1074] usb 3-1: USB disconnect, device number 6 [ 174.831409][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 174.901661][ T3777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.909796][ T3777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.941530][ T3976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.951916][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.963905][ T3976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.971305][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.976149][ T5112] loop2: detected capacity change from 0 to 512 [ 174.996754][ T23] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 175.021256][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.043672][ T3777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.053640][ T3777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.063095][ T23] usb 1-1: config 0 descriptor?? [ 175.088926][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.091431][ T3976] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.141258][ T3976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.147864][ T5112] EXT4-fs (loop2): 1 orphan inode deleted [ 175.159641][ T3976] usb 2-1: SerialNumber: syz [ 175.202932][ T5112] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 175.302436][ T5112] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 175.496738][ T3976] usb 2-1: 0:2 : does not exist [ 175.543296][ T23] hid-generic 0003:1044:7A4D.0015: item fetching failed at offset 0/3 [ 175.553047][ T23] hid-generic: probe of 0003:1044:7A4D.0015 failed with error -22 [ 175.617125][ T5124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.298'. [ 175.664401][ T3976] usb 2-1: USB disconnect, device number 8 [ 175.777312][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.832583][ T5130] nvme_fabrics: missing parameter 'transport=%s' [ 176.868340][ T5130] nvme_fabrics: missing parameter 'nqn=%s' [ 176.978852][ T3619] usb 1-1: USB disconnect, device number 11 [ 177.546998][ T5140] loop1: detected capacity change from 0 to 512 [ 177.596393][ T5140] EXT4-fs (loop1): quotafile must be on filesystem root [ 177.911453][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.201295][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 178.601271][ T3976] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.831411][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 178.913255][ T5158] netlink: 256 bytes leftover after parsing attributes in process `syz.1.329'. [ 179.136387][ T5160] loop0: detected capacity change from 0 to 512 [ 179.210391][ T5160] EXT4-fs (loop0): 1 orphan inode deleted [ 179.231263][ T5160] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 179.313027][ T5160] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 179.357728][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.367468][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.579246][ T3976] usb 3-1: Using ep0 maxpacket: 32 [ 180.646089][ T3730] device hsr_slave_0 left promiscuous mode [ 180.658385][ T3730] device hsr_slave_1 left promiscuous mode [ 180.687402][ T3730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.711441][ T3976] usb 3-1: device descriptor read/all, error -71 [ 180.720004][ T3730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.737723][ T3730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.753608][ T3730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.791330][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.797635][ T3730] device bridge_slave_1 left promiscuous mode [ 180.800378][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.909872][ T7] usb 5-1: Product: syz [ 181.006379][ T3616] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.069171][ T7] usb 5-1: can't set config #1, error -71 [ 181.075851][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.362252][ T7] usb 5-1: USB disconnect, device number 9 [ 181.495901][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 181.617517][ T5192] nvme_fabrics: missing parameter 'transport=%s' [ 181.661452][ T5192] nvme_fabrics: missing parameter 'nqn=%s' [ 181.681515][ T3616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.699689][ T3730] device bridge_slave_0 left promiscuous mode [ 181.718098][ T3616] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 181.718379][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.745140][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.780172][ T3616] usb 2-1: config 0 descriptor?? [ 181.822986][ T3730] device veth1_macvtap left promiscuous mode [ 181.836184][ T3730] device veth0_macvtap left promiscuous mode [ 181.852974][ T3730] device veth1_vlan left promiscuous mode [ 181.869933][ T3730] device veth0_vlan left promiscuous mode [ 182.055742][ T5202] kvm: emulating exchange as write [ 182.125637][ T5206] loop2: detected capacity change from 0 to 512 [ 182.200641][ T5206] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 182.227395][ T5206] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 182.273589][ T5206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 182.285084][ T3616] hid-generic 0003:1044:7A4D.0016: item fetching failed at offset 0/3 [ 182.301285][ T5206] System zones: 1-12 [ 182.301588][ T3616] hid-generic: probe of 0003:1044:7A4D.0016 failed with error -22 [ 182.309064][ T5206] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.344: corrupted in-inode xattr [ 182.357781][ T5206] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.344: couldn't read orphan inode 15 (err -117) [ 182.389572][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 182.465246][ T3730] team0 (unregistering): Port device team_slave_1 removed [ 182.505795][ T3730] team0 (unregistering): Port device team_slave_0 removed [ 182.591925][ T3730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.616650][ T3730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.817279][ T3730] bond0 (unregistering): Released all slaves [ 183.806621][ T3616] usb 2-1: USB disconnect, device number 9 [ 183.846807][ T5216] loop1: detected capacity change from 0 to 512 [ 183.951394][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.338'. [ 184.057867][ T5216] EXT4-fs (loop1): 1 orphan inode deleted [ 184.081602][ T5216] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 184.104115][ T5216] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 185.345575][ T1074] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.033030][ T5236] nvme_fabrics: missing parameter 'transport=%s' [ 186.082225][ T5236] nvme_fabrics: missing parameter 'nqn=%s' [ 186.297206][ T5247] loop0: detected capacity change from 0 to 512 [ 186.398382][ T5247] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 186.418531][ T5247] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 186.453686][ T1074] usb 5-1: Using ep0 maxpacket: 32 [ 186.470312][ T5247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 186.486564][ T5247] System zones: 1-12 [ 186.502822][ T5247] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.356: corrupted in-inode xattr [ 187.537432][ T5247] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.356: couldn't read orphan inode 15 (err -117) [ 187.571312][ T1074] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 187.579002][ T1074] usb 5-1: can't read configurations, error -71 [ 187.601228][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.609746][ T5247] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 187.896742][ T5260] netlink: 256 bytes leftover after parsing attributes in process `syz.3.358'. [ 188.021243][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 188.157162][ T26] audit: type=1800 audit(1726819947.204:5): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.361" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 188.807427][ T23] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 188.835938][ T23] usb 2-1: config 0 has an invalid interface number: 253 but max is 1 [ 188.922760][ T23] usb 2-1: config 0 has no interface number 0 [ 188.928872][ T23] usb 2-1: config 0 has no interface number 1 [ 189.405694][ T5277] loop2: detected capacity change from 0 to 512 [ 189.641243][ T23] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 189.660242][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.367584][ T5289] nvme_fabrics: missing parameter 'transport=%s' [ 190.418282][ T5289] nvme_fabrics: missing parameter 'nqn=%s' [ 190.437510][ T23] usb 2-1: config 0 descriptor?? [ 190.442095][ T5277] EXT4-fs (loop2): 1 orphan inode deleted [ 190.461366][ T23] usb 2-1: can't set config #0, error -71 [ 190.480065][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 190.495486][ T23] usb 2-1: USB disconnect, device number 10 [ 190.542083][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 190.644240][ T5277] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 191.426138][ T5301] loop2: detected capacity change from 0 to 128 [ 194.284959][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297787][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.995052][ T5320] device wireguard0 entered promiscuous mode [ 195.851216][ T5326] nvme_fabrics: missing parameter 'transport=%s' [ 195.876636][ T5326] nvme_fabrics: missing parameter 'nqn=%s' [ 196.050398][ T5329] loop4: detected capacity change from 0 to 512 [ 196.158270][ T5329] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 196.172792][ T5331] loop1: detected capacity change from 0 to 512 [ 196.179234][ T5329] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 196.218402][ T5329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 196.276294][ T5329] System zones: 1-12 [ 196.582412][ T5331] EXT4-fs (loop1): 1 orphan inode deleted [ 196.611299][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.640357][ T5329] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.377: corrupted in-inode xattr [ 196.731020][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 196.834053][ T5331] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 196.844082][ T5329] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.377: couldn't read orphan inode 15 (err -117) [ 196.856323][ T5329] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 196.901168][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 196.913188][ T5341] process 'syz.0.381' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 197.274776][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.392206][ T5349] loop0: detected capacity change from 0 to 2048 [ 198.084087][ T5349] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 198.097860][ T23] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 198.128661][ T5349] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,usrjquota=,errors=remount-ro,discard,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 198.191537][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.271657][ T23] usb 4-1: config 0 descriptor?? [ 198.299255][ T5360] loop3: detected capacity change from 0 to 2048 [ 198.361228][ T23] usb 4-1: can't set config #0, error -71 [ 198.377544][ T23] usb 4-1: USB disconnect, device number 7 [ 198.471880][ T5360] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.712396][ T5360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.322764][ T5380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.235848][ T5383] loop3: detected capacity change from 0 to 512 [ 200.669109][ T5387] loop2: detected capacity change from 0 to 2048 [ 201.002450][ T5394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 201.030640][ T5383] EXT4-fs (loop3): 1 orphan inode deleted [ 201.048453][ T5383] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 201.057794][ T5387] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 201.071880][ T5383] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 201.411470][ T3976] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 202.072486][ T5387] EXT4-fs (loop2): shut down requested (0) [ 202.111180][ T1304] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.321225][ T3976] usb 2-1: Using ep0 maxpacket: 16 [ 202.453957][ T1122] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.481507][ T3976] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 202.511472][ T1304] usb 5-1: Using ep0 maxpacket: 32 [ 202.528667][ T3976] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.538057][ T1122] EXT4-fs (loop2): Remounting filesystem read-only [ 202.581304][ T3976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.661325][ T1304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.702180][ T3976] usb 2-1: config 0 descriptor?? [ 202.731931][ T1304] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 202.741003][ T1304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.762164][ T3976] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 202.827429][ T1304] usb 5-1: config 0 descriptor?? [ 202.905643][ T5418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.860442][ T3616] usb 2-1: USB disconnect, device number 11 [ 206.901531][ T1304] usbhid 5-1:0.0: can't add hid device: -71 [ 206.907562][ T1304] usbhid: probe of 5-1:0.0 failed with error -71 [ 207.140764][ T1304] usb 5-1: USB disconnect, device number 12 [ 207.152496][ T5425] loop0: detected capacity change from 0 to 512 [ 207.194868][ T5425] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.226670][ T5425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 207.245582][ T5425] System zones: 1-12 [ 207.263084][ T5425] EXT4-fs (loop0): 1 truncate cleaned up [ 207.268810][ T5425] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 207.270603][ T5436] loop3: detected capacity change from 0 to 512 [ 207.788303][ T5436] EXT4-fs (loop3): 1 orphan inode deleted [ 207.811227][ T5436] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 207.845720][ T5436] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 209.112052][ T5457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.414'. [ 209.166737][ T5459] loop1: detected capacity change from 0 to 512 [ 209.261948][ T5459] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 209.318059][ T5459] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 209.364358][ T5459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 209.425517][ T5459] System zones: 1-12 [ 209.634905][ T5459] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.416: corrupted in-inode xattr [ 209.816316][ T5459] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.416: couldn't read orphan inode 15 (err -117) [ 210.051208][ T5459] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 211.650484][ T5473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.508070][ T5476] loop1: detected capacity change from 0 to 512 [ 212.529145][ T5478] loop4: detected capacity change from 0 to 512 [ 212.618232][ T5476] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 212.644185][ T5478] EXT4-fs (loop4): 1 orphan inode deleted [ 212.650034][ T5478] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 212.706033][ T5476] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 212.748123][ T5476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 212.795135][ T5476] System zones: 1-12 [ 212.795977][ T5478] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 212.842484][ T5476] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.421: corrupted in-inode xattr [ 212.862592][ T5476] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.421: couldn't read orphan inode 15 (err -117) [ 212.879338][ T5476] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 213.069145][ T5488] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 214.579700][ T5510] loop3: detected capacity change from 0 to 512 [ 214.833593][ T5507] loop1: detected capacity change from 0 to 256 [ 216.052107][ T1074] Bluetooth: hci5: command 0x0409 tx timeout [ 216.145168][ T5510] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 216.152567][ T5511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'. [ 216.177104][ T5510] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 216.200516][ T5510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 216.245728][ T5510] System zones: 1-12 [ 216.252421][ T5510] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.430: corrupted in-inode xattr [ 216.319719][ T5510] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.430: couldn't read orphan inode 15 (err -117) [ 216.534215][ T5521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.542921][ T5510] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 217.186983][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 217.326914][ T5525] loop1: detected capacity change from 0 to 2048 [ 217.379055][ T5528] loop0: detected capacity change from 0 to 512 [ 217.427320][ T5525] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 217.450201][ T5529] loop4: detected capacity change from 0 to 512 [ 217.517286][ T5529] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 217.528503][ T5528] EXT4-fs (loop0): 1 orphan inode deleted [ 217.633950][ T5529] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 217.651492][ T5528] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 217.710051][ T5525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.742734][ T5528] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 217.857549][ T5529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 217.873089][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.890483][ T5529] System zones: 1-12 [ 217.961347][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.006824][ T5529] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.436: corrupted in-inode xattr [ 218.046121][ T5492] device bridge_slave_0 entered promiscuous mode [ 218.072620][ T5529] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.436: couldn't read orphan inode 15 (err -117) [ 218.080498][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.091518][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 218.097626][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.105568][ T5492] device bridge_slave_1 entered promiscuous mode [ 218.113520][ T5529] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 218.213175][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.237470][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.473218][ T5548] xt_NFQUEUE: number of total queues is 0 [ 219.102609][ T5548] loop1: detected capacity change from 0 to 256 [ 219.423344][ T5548] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 219.586482][ T5492] team0: Port device team_slave_0 added [ 219.699601][ T5492] team0: Port device team_slave_1 added [ 220.347057][ T1304] Bluetooth: hci5: command 0x040f tx timeout [ 220.474641][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.524211][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.581442][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.594324][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.601344][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.628248][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.734009][ T5492] device hsr_slave_0 entered promiscuous mode [ 220.745796][ T5544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.781876][ T5492] device hsr_slave_1 entered promiscuous mode [ 220.916908][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 221.092061][ T5492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.289667][ T5580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.160741][ T5492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.390439][ T5492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.404176][ T3661] Bluetooth: hci5: command 0x0419 tx timeout [ 223.068904][ T5589] loop0: detected capacity change from 0 to 512 [ 223.176894][ T5589] EXT4-fs (loop0): 1 orphan inode deleted [ 223.197714][ T5492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.200159][ T5589] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 223.235391][ T5589] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 225.301939][ T5492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.312180][ T5492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.340943][ T5492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.432127][ T5492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.443610][ T5619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.205150][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.230761][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'. [ 227.241974][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.293121][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.303822][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.333825][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.383120][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.410803][ T5623] loop1: detected capacity change from 0 to 128 [ 227.423841][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.430957][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.441830][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.465626][ T5623] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 227.490686][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.624144][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.635605][ T5625] loop4: detected capacity change from 0 to 512 [ 227.688481][ T3785] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.695582][ T3785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.710047][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.729564][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.766468][ T5625] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.459: bad orphan inode 15 [ 227.786665][ T5625] ext4_test_bit(bit=14, block=5) = 0 [ 227.796413][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.816359][ T5625] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 227.865378][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.878540][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.908923][ T5625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 227.925604][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.928558][ T5625] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.459: bit already cleared for inode 13 [ 227.963773][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.971957][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.980668][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.998296][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.007469][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.018088][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.110295][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 228.129901][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 229.633691][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.641365][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.681418][ T5492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.743924][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.758826][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.951915][ T5653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.811170][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.820211][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.842523][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.860712][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.906720][ T5492] device veth0_vlan entered promiscuous mode [ 230.938602][ T5492] device veth1_vlan entered promiscuous mode [ 231.033841][ T5660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 231.094029][ T5663] loop3: detected capacity change from 0 to 128 [ 231.114107][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.165154][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.195913][ T5492] device veth0_macvtap entered promiscuous mode [ 231.202420][ T5663] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 231.217929][ T5492] device veth1_macvtap entered promiscuous mode [ 231.247009][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.269106][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.282084][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.301237][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.349469][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.380034][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.403849][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.425671][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.448051][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.480881][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.508998][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.546786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.606196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.634720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.657106][ T5667] loop3: detected capacity change from 0 to 2048 [ 231.686389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.711779][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.746486][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.792735][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.811186][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.861187][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.893072][ T5667] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.901377][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.939912][ T26] audit: type=1800 audit(1726819990.984:6): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.471" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 232.020640][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.091309][ T26] audit: type=1800 audit(1726819991.024:7): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.471" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 232.121137][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.171304][ T5492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.232845][ T5492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.269602][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.335695][ T5492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.344639][ T5492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.354498][ T5492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.363963][ T5492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.469442][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.481303][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.514560][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.523909][ T3789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.530220][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.533846][ T3789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.634767][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.795851][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.155186][ T5698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.375348][ T5694] loop4: detected capacity change from 0 to 512 [ 236.455846][ T5694] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 236.464067][ T5694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.549063][ T5694] EXT4-fs (loop4): 1 orphan inode deleted [ 236.641462][ T3616] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 236.704688][ T5694] EXT4-fs (loop4): 1 truncate cleaned up [ 236.710530][ T5694] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nodelalloc,mblk_io_submit,inode_readahead_blks=0x0000000000000004,block_validity,quota,,errors=continue. Quota mode: writeback. [ 237.611516][ T5710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'. [ 237.631401][ T3616] usb 1-1: Using ep0 maxpacket: 32 [ 237.751436][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.788969][ T3616] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 237.840487][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.068576][ T3616] usb 1-1: config 0 descriptor?? [ 238.111467][ T3616] usb 1-1: can't set config #0, error -71 [ 238.159666][ T3616] usb 1-1: USB disconnect, device number 12 [ 238.439393][ T5736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.798897][ T5750] loop4: detected capacity change from 0 to 2048 [ 241.539528][ T5750] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 241.560323][ T5752] usb usb7: usbfs: process 5752 (syz.1.496) did not claim interface 0 before use [ 241.620817][ T5750] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,usrjquota=,errors=remount-ro,discard,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 242.301140][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.713460][ T5771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 242.750939][ T5774] loop4: detected capacity change from 0 to 1024 [ 243.022278][ T5778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.673487][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 243.708709][ T5774] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 243.761445][ T5774] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 243.871437][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.902514][ T7] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 243.921417][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.973654][ T7] usb 2-1: config 0 descriptor?? [ 244.295198][ T1074] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 244.356068][ T5793] loop0: detected capacity change from 0 to 512 [ 244.439215][ T5793] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 244.449873][ T5793] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 244.467088][ T5793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 244.478713][ T7] hid-generic 0003:1044:7A4D.0017: item fetching failed at offset 0/3 [ 244.487254][ T5793] System zones: 1-12 [ 244.495400][ T5793] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.509: corrupted in-inode xattr [ 244.498356][ T7] hid-generic: probe of 0003:1044:7A4D.0017 failed with error -22 [ 244.508902][ T5793] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.509: couldn't read orphan inode 15 (err -117) [ 244.528914][ T5793] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 244.772042][ T1074] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 244.803484][ T1074] usb 3-1: config 0 has no interface number 0 [ 244.811415][ T1074] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 244.822409][ T1074] usb 3-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0x11, skipping [ 244.833208][ T1074] usb 3-1: New USB device found, idVendor=5050, idProduct=0101, bcdDevice=24.a1 [ 244.842344][ T1074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.858413][ T1074] usb 3-1: config 0 descriptor?? [ 244.921903][ T1074] ftdi_sio 3-1:0.189: FTDI USB Serial Device converter detected [ 245.447740][ T1074] usb 3-1: Detected FT-X [ 245.473617][ T1074] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 245.501343][ T1074] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 245.531226][ T1074] ftdi_sio 3-1:0.189: GPIO initialisation failed: -71 [ 245.548980][ T1074] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 245.570189][ T1074] usb 3-1: USB disconnect, device number 9 [ 245.589129][ T1074] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 245.602937][ T1074] ftdi_sio 3-1:0.189: device disconnected [ 246.158169][ T2990] usb 2-1: USB disconnect, device number 12 [ 246.671923][ T5818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.344637][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 247.879253][ T5825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 248.131266][ T3616] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.942024][ T5834] loop4: detected capacity change from 0 to 512 [ 248.961180][ T3616] usb 1-1: Using ep0 maxpacket: 32 [ 249.024168][ T1235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.057608][ T5834] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 249.071318][ T5834] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 249.119816][ T5834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 249.128084][ T5834] System zones: 1-12 [ 249.169755][ T5834] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.521: corrupted in-inode xattr [ 249.525116][ T3616] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 249.548406][ T3616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.711409][ T5834] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.521: couldn't read orphan inode 15 (err -117) [ 249.751621][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 249.761106][ T3616] usb 1-1: Product: syz [ 249.818310][ T3616] usb 1-1: Manufacturer: syz [ 249.828077][ T3616] usb 1-1: SerialNumber: syz [ 251.152622][ T3616] usb 1-1: config 0 descriptor?? [ 251.171315][ T3616] usb 1-1: can't set config #0, error -71 [ 251.357164][ T1235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.369544][ T3616] usb 1-1: USB disconnect, device number 13 [ 252.891994][ T5856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.946428][ T1235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.931213][ T5874] loop4: detected capacity change from 0 to 256 [ 254.109993][ T1235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.976639][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982981][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.118982][ T3615] Bluetooth: hci3: command 0x0409 tx timeout [ 256.196297][ T5895] loop1: detected capacity change from 0 to 512 [ 256.256738][ T5895] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 256.266884][ T5895] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 256.398842][ T5895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 256.488611][ T5895] System zones: 1-12 [ 256.513224][ T5895] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.539: corrupted in-inode xattr [ 256.580661][ T5895] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.539: couldn't read orphan inode 15 (err -117) [ 256.618520][ T5895] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 257.846038][ T5922] loop4: detected capacity change from 0 to 1024 [ 258.069364][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 258.184958][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 259.083592][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 259.290548][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 259.299202][ T5951] loop1: detected capacity change from 0 to 512 [ 259.363714][ T2990] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 259.376056][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.387348][ T5951] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 259.397619][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.412046][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.420918][ T5865] device bridge_slave_0 entered promiscuous mode [ 259.434752][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.444641][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.452816][ T5865] device bridge_slave_1 entered promiscuous mode [ 259.585940][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.599492][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.699178][ T2990] usb 5-1: Using ep0 maxpacket: 32 [ 259.902854][ T2990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.973895][ T2990] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 260.068063][ T2990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.189725][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.201363][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.222431][ T2990] usb 5-1: config 0 descriptor?? [ 260.242935][ T5901] device bridge_slave_0 entered promiscuous mode [ 260.301092][ T3661] Bluetooth: hci3: command 0x040f tx timeout [ 260.340466][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.348472][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.364527][ T5901] device bridge_slave_1 entered promiscuous mode [ 260.382395][ T5865] team0: Port device team_slave_0 added [ 260.491603][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.513237][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.595866][ T5865] team0: Port device team_slave_1 added [ 260.630449][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.780462][ T2990] hid-generic 0003:1044:7A4D.0018: item fetching failed at offset 0/3 [ 260.797027][ T2990] hid-generic: probe of 0003:1044:7A4D.0018 failed with error -22 [ 260.890855][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.892989][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.289968][ T3661] Bluetooth: hci0: command 0x041b tx timeout [ 261.290932][ T3661] Bluetooth: hci5: command 0x0409 tx timeout [ 261.520646][ T5901] team0: Port device team_slave_0 added [ 261.638365][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.645467][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.752713][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.858852][ T5901] team0: Port device team_slave_1 added [ 261.981462][ T1235] device hsr_slave_0 left promiscuous mode [ 262.116833][ T3653] usb 5-1: USB disconnect, device number 13 [ 262.321498][ T3661] Bluetooth: hci3: command 0x0419 tx timeout [ 262.426682][ T1235] device hsr_slave_1 left promiscuous mode [ 263.025969][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.112517][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.171921][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.179335][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.211788][ T1235] device bridge_slave_1 left promiscuous mode [ 263.229331][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.289608][ T1235] device bridge_slave_0 left promiscuous mode [ 263.311585][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.406486][ T1235] device veth1_macvtap left promiscuous mode [ 263.412884][ T1235] device veth0_macvtap left promiscuous mode [ 263.417667][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 263.425506][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 263.448341][ T1235] device veth1_vlan left promiscuous mode [ 263.454289][ T1235] device veth0_vlan left promiscuous mode [ 263.468707][ T5987] loop1: detected capacity change from 0 to 512 [ 263.519971][ T5987] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 263.528964][ T5987] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 263.549346][ T5987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 263.567279][ T5987] System zones: 1-12 [ 263.575461][ T5987] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.553: corrupted in-inode xattr [ 263.588741][ T5987] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.553: couldn't read orphan inode 15 (err -117) [ 263.601181][ T5987] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 263.813689][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 263.843461][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 263.857962][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.873425][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.387228][ T1235] bond0 (unregistering): Released all slaves [ 264.579813][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.615895][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.642670][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.659001][ T5865] device hsr_slave_0 entered promiscuous mode [ 264.667036][ T5865] device hsr_slave_1 entered promiscuous mode [ 264.678840][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.686502][ T5865] Cannot create hsr debugfs directory [ 264.697875][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.715578][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.741709][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.775213][ T5994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.812141][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 264.918131][ T5901] device hsr_slave_0 entered promiscuous mode [ 264.925949][ T5901] device hsr_slave_1 entered promiscuous mode [ 264.954090][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.972100][ T5901] Cannot create hsr debugfs directory [ 265.368777][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.400987][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.434861][ T5938] device bridge_slave_0 entered promiscuous mode [ 265.441893][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 265.449318][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 265.470919][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.480797][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.489247][ T5938] device bridge_slave_1 entered promiscuous mode [ 265.583141][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.676477][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.062949][ T7] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 266.100635][ T7] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 266.689977][ T7] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 266.720524][ T5938] team0: Port device team_slave_0 added [ 266.803141][ T5938] team0: Port device team_slave_1 added [ 267.816269][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 267.848606][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.885588][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.960703][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.983164][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.990116][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.946959][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.231939][ T5938] device hsr_slave_0 entered promiscuous mode [ 269.251219][ T3653] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 269.271769][ T5938] device hsr_slave_1 entered promiscuous mode [ 269.285241][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.292935][ T5938] Cannot create hsr debugfs directory [ 269.325612][ T5901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.475803][ T5901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.497127][ T6048] loop4: detected capacity change from 0 to 512 [ 269.504147][ T3653] usb 2-1: Using ep0 maxpacket: 32 [ 269.593735][ T6048] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 269.600944][ T6048] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 269.619056][ T6048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 269.621410][ T3653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.627157][ T6048] System zones: [ 269.648958][ T3653] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 269.651385][ T6048] 1-12 [ 269.658570][ T3653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.661891][ T6048] [ 269.681308][ T6048] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.561: corrupted in-inode xattr [ 269.701186][ T6048] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.561: couldn't read orphan inode 15 (err -117) [ 269.709274][ T3653] usb 2-1: config 0 descriptor?? [ 269.721634][ T6048] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 269.755180][ T5901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.957472][ T5901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.437784][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.498556][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.556005][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.590487][ T5938] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.631985][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.636086][ T3653] hid-generic 0003:1044:7A4D.001A: item fetching failed at offset 0/3 [ 270.649017][ T3653] hid-generic: probe of 0003:1044:7A4D.001A failed with error -22 [ 270.685374][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.750772][ T5938] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.948115][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.983047][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.260959][ T5938] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.452465][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.732750][ T5938] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.769339][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.938850][ T23] usb 2-1: USB disconnect, device number 13 [ 271.950791][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.959132][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.986931][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.016841][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.046597][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.060700][ T6087] loop1: detected capacity change from 0 to 128 [ 272.087870][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.094977][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.111534][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.236262][ T6087] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.295759][ T6087] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 272.363624][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.388793][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.522727][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.586525][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.593687][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.625030][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.645667][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.775945][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.786651][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.926054][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.953929][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.982678][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.052102][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.116309][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.598836][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.607517][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.615473][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.639107][ T5901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.662792][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.677516][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.686488][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.802108][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.825698][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.961854][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.994317][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.001442][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.762556][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.786266][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.796513][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.832124][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.859640][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.866749][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.895349][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.907175][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.917176][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.928951][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.942386][ T6136] loop4: detected capacity change from 0 to 512 [ 274.949462][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.085444][ T6136] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 275.112824][ T6136] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 275.123101][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.132503][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 275.142145][ T6136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 275.151994][ T6136] System zones: 1-12 [ 275.158192][ T6136] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.569: corrupted in-inode xattr [ 275.357596][ T6136] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.569: couldn't read orphan inode 15 (err -117) [ 275.540523][ T6136] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 275.877373][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.887359][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.905973][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.924283][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.954319][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.989829][ T6154] netlink: 80 bytes leftover after parsing attributes in process `syz.1.570'. [ 276.011345][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.382197][ T5865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.438277][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.454077][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.033828][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.627048][ T6171] ptrace attach of "./syz-executor exec"[4921] was attempted by "./syz-executor exec"[6171] [ 277.688007][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.795135][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.803851][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.852493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.864468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.876781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.884753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.895225][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.916514][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.924408][ T3802] Bluetooth: hci2: command 0x0406 tx timeout [ 277.930867][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.942440][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.966084][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.974639][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.983145][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.993542][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.004349][ T5901] device veth0_vlan entered promiscuous mode [ 278.019721][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.028378][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.037083][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.044187][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.054034][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.063485][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.071938][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.079000][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.087253][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.114317][ T5865] device veth0_vlan entered promiscuous mode [ 278.128211][ T5901] device veth1_vlan entered promiscuous mode [ 278.136541][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.144882][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.155224][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.163928][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.178736][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.204227][ T5865] device veth1_vlan entered promiscuous mode [ 278.216240][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.224673][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.238701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.249514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.258493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.268050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.277874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.314490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.323888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.336104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.351799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.370562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.401948][ T5865] device veth0_macvtap entered promiscuous mode [ 278.422331][ T5865] device veth1_macvtap entered promiscuous mode [ 278.439055][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.451308][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.471080][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.500227][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.517339][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.528210][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.547954][ T6174] loop1: detected capacity change from 0 to 1024 [ 278.549399][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.566371][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.577065][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.587778][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.599830][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.609598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.619096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.634374][ T6174] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.644509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.650337][ T6174] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 278.652716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.677638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.686568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.696306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.706832][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.716170][ T5901] device veth0_macvtap entered promiscuous mode [ 278.727425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.735668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.764823][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 278.776171][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.818924][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.848101][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.858756][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.869301][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.889663][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.901298][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.919699][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.930212][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.951721][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.963745][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.990664][ T5901] device veth1_macvtap entered promiscuous mode [ 279.026743][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.040633][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.061566][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.080850][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.100931][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.120375][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.145418][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.155990][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.165961][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.176787][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.186830][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.197824][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.213325][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.283025][ T6183] loop1: detected capacity change from 0 to 256 [ 279.305358][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.317068][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.327519][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.338559][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.354665][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.366789][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 279.403752][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.437597][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.468243][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.499490][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.530686][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 279.566966][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.607347][ T7] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 279.627862][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.664868][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.688922][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.753287][ T7] usb 5-1: config 0 descriptor?? [ 279.754012][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.769005][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.780090][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.788721][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.824134][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.861888][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.887337][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.898967][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.908654][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.917607][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.932997][ T5865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.943725][ T5865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.960826][ T5865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.969588][ T5865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.982622][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.991803][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.000498][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.010372][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.054070][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.066177][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.106983][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.161820][ T5547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.177175][ T5547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.210970][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.224362][ T7] hid-rmi 0003:0461:4E72.001B: unknown main item tag 0x0 [ 280.234041][ T7] hid-rmi 0003:0461:4E72.001B: unknown main item tag 0x0 [ 280.242976][ T7] hid-rmi 0003:0461:4E72.001B: unknown main item tag 0x0 [ 280.250074][ T7] hid-rmi 0003:0461:4E72.001B: unknown main item tag 0x0 [ 280.257165][ T7] hid-rmi 0003:0461:4E72.001B: unknown main item tag 0x0 [ 280.268907][ T7] hid-rmi 0003:0461:4E72.001B: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 280.387997][ T3789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.396662][ T3789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.446061][ T3789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.465484][ T3789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.474804][ T3619] usb 5-1: USB disconnect, device number 14 [ 280.495816][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.521863][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.530098][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.558630][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.640815][ T5938] device veth0_vlan entered promiscuous mode [ 280.677329][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.757811][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.993362][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.021828][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.058318][ T5938] device veth1_vlan entered promiscuous mode [ 282.209369][ T1235] device hsr_slave_0 left promiscuous mode [ 282.225943][ T3789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.318013][ T3789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.374656][ T1235] device hsr_slave_1 left promiscuous mode [ 282.414529][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.480530][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.529722][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.574186][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.973101][ T1235] device bridge_slave_1 left promiscuous mode [ 282.995743][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.033566][ T1235] device bridge_slave_0 left promiscuous mode [ 283.079040][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.083927][ T6202] loop1: detected capacity change from 0 to 512 [ 283.135532][ T1235] device hsr_slave_0 left promiscuous mode [ 283.154419][ T1235] device hsr_slave_1 left promiscuous mode [ 283.160973][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.177871][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.190321][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.206728][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.216920][ T1235] device bridge_slave_1 left promiscuous mode [ 283.235436][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.282178][ T1235] device bridge_slave_0 left promiscuous mode [ 283.295810][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.310336][ T1235] device veth1_macvtap left promiscuous mode [ 283.316497][ T1235] device veth0_macvtap left promiscuous mode [ 283.322465][ T6202] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 283.322542][ T6202] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 283.329756][ T1235] device veth1_vlan left promiscuous mode [ 283.343861][ T1235] device veth0_vlan left promiscuous mode [ 283.499076][ T6202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 283.565859][ T6202] System zones: 1-12 [ 283.589367][ T1235] device veth1_macvtap left promiscuous mode [ 283.638287][ T6202] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.579: corrupted in-inode xattr [ 283.657685][ T1235] device veth0_macvtap left promiscuous mode [ 283.700571][ T1235] device veth1_vlan left promiscuous mode [ 283.728100][ T6202] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.579: couldn't read orphan inode 15 (err -117) [ 283.747830][ T1235] device veth0_vlan left promiscuous mode [ 283.828636][ T6202] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 284.603391][ T6215] "syz.4.583" (6215) uses obsolete ecb(arc4) skcipher [ 284.887199][ T6221] loop1: detected capacity change from 0 to 2048 [ 284.958541][ T6221] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.971527][ T6221] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff) [ 284.989834][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 285.024352][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 285.194699][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.219251][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.338104][ T6229] fs-verity: sha256 using implementation "sha256-avx2" [ 285.359200][ T6229] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.585: bg 0: block 288: padding at end of block bitmap is not set [ 285.455620][ T6229] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117 [ 285.465046][ T6229] syz.1.585 (6229) used greatest stack depth: 19264 bytes left [ 285.886170][ T1235] bond0 (unregistering): Released all slaves [ 287.410059][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 287.439021][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 287.466315][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.554761][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.947011][ T6240] loop1: detected capacity change from 0 to 512 [ 288.168570][ T6240] EXT4-fs (loop1): 1 orphan inode deleted [ 288.178022][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 288.224345][ T6240] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038 (0x7fffffff) [ 288.263441][ T1235] bond0 (unregistering): Released all slaves [ 288.451266][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.563788][ T5938] device veth0_macvtap entered promiscuous mode [ 288.621659][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.651737][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.662558][ T5938] device veth1_macvtap entered promiscuous mode [ 288.715135][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.736241][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.862621][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.888466][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.923825][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.969752][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.133371][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.860561][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.913024][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.929893][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.973858][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.022675][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.070650][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.122304][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.190796][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.866447][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.234111][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.273245][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.305167][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.341153][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.375850][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.406677][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.436632][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.456691][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.487275][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.518770][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.566146][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.608719][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.664048][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.685109][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.709696][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.731511][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.146396][ T6286] loop3: detected capacity change from 0 to 512 [ 293.765234][ T6286] EXT4-fs (loop3): Ignoring removed orlov option [ 293.812386][ T6286] EXT4-fs (loop3): 1 orphan inode deleted [ 293.818174][ T6286] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,nojournal_checksum,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 293.839752][ T6286] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 293.855038][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.874539][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.886246][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.965950][ T3789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.983842][ T3789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.094110][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.234911][ T6295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.556372][ T3615] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 298.051160][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 298.211290][ T3615] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 298.289952][ T3615] usb 3-1: can't read configurations, error -61 [ 298.471280][ T3615] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 298.695150][ T6326] loop1: detected capacity change from 0 to 40427 [ 298.761312][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 298.941369][ T3615] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 298.962817][ T3615] usb 3-1: can't read configurations, error -61 [ 298.999157][ T3615] usb usb3-port1: attempt power cycle [ 299.368975][ T6326] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 299.411147][ T6326] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 299.497112][ T3615] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 299.502687][ T6326] F2FS-fs (loop1): invalid crc value [ 299.550692][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 299.611396][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 299.811309][ T3615] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 299.822269][ T3615] usb 3-1: can't read configurations, error -61 [ 300.514057][ T6326] F2FS-fs (loop1): Found nat_bits in checkpoint [ 300.679273][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.729594][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.746366][ T6341] device bridge_slave_0 entered promiscuous mode [ 300.779258][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.789770][ T6326] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 301.013523][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.120512][ T6341] device bridge_slave_1 entered promiscuous mode [ 301.284603][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.331660][ T23] Bluetooth: hci6: command 0x0409 tx timeout [ 301.464493][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.085619][ T6341] team0: Port device team_slave_0 added [ 302.115494][ T6341] team0: Port device team_slave_1 added [ 302.179335][ T6375] loop3: detected capacity change from 0 to 2048 [ 302.240463][ T6375] loop3: p1 p2 p3 [ 303.122543][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.141219][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.206446][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 303.207326][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 303.311704][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 303.393865][ T2990] Bluetooth: hci6: command 0x041b tx timeout [ 303.467526][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.484739][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.497035][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.535295][ T6382] loop3: detected capacity change from 0 to 512 [ 303.568613][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.596317][ T6382] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.809738][ T6382] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noquota,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 303.829532][ T6382] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 304.823802][ T6396] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.627: bg 0: block 224: padding at end of block bitmap is not set [ 304.847857][ T6396] EXT4-fs (loop3): Remounting filesystem read-only [ 305.536913][ T1074] Bluetooth: hci6: command 0x040f tx timeout [ 305.644701][ T6397] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 305.681163][ T6397] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 305.713200][ T6397] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 305.741173][ T6397] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 305.837747][ T6341] device hsr_slave_0 entered promiscuous mode [ 305.845141][ T6341] device hsr_slave_1 entered promiscuous mode [ 305.939998][ T1235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.156902][ T1235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.158266][ T6401] loop1: detected capacity change from 0 to 40427 [ 306.486199][ T6401] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 306.670628][ T6401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 306.713206][ T1235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.186489][ T6401] F2FS-fs (loop1): invalid crc value [ 307.247884][ T6401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 308.064410][ T23] Bluetooth: hci6: command 0x0419 tx timeout [ 308.098664][ T1235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.213260][ T6401] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 308.309543][ T6401] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 308.345146][ T6401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 309.667413][ T6341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.706272][ T6341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.910274][ T6341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.635459][ T6341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.992784][ T6457] loop3: detected capacity change from 0 to 512 [ 314.541521][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.587885][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.598661][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.642355][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.663014][ T6474] loop1: detected capacity change from 0 to 512 [ 314.892935][ T6474] EXT4-fs (loop1): 1 orphan inode deleted [ 314.911159][ T6474] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 314.950629][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.959743][ T6474] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038 (0x7fffffff) [ 315.108134][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.360702][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.367873][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.681677][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.734323][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.787231][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.794392][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.869173][ T26] audit: type=1800 audit(1726820074.914:8): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.652" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 316.117548][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.189402][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.324202][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.342787][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.379903][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.418052][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.537651][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.567045][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.613452][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.628901][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.655307][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.683494][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.789151][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.821502][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.827980][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.170979][ T1235] device hsr_slave_0 left promiscuous mode [ 317.200491][ T1235] device hsr_slave_1 left promiscuous mode [ 317.224679][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.318737][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.560457][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.576075][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.234548][ T1235] device bridge_slave_1 left promiscuous mode [ 318.251413][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.270130][ T1235] device bridge_slave_0 left promiscuous mode [ 318.294163][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.357672][ T1235] device veth1_macvtap left promiscuous mode [ 318.378447][ T1235] device veth0_macvtap left promiscuous mode [ 318.397108][ T1235] device veth1_vlan left promiscuous mode [ 318.425296][ T1235] device veth0_vlan left promiscuous mode [ 318.491238][ T3616] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 318.911360][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 319.052330][ T3616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.159218][ T3616] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 319.258925][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.310096][ T3616] usb 2-1: config 0 descriptor?? [ 319.971568][ T2990] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 320.690857][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 320.714856][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 321.311825][ T3616] usbhid 2-1:0.0: can't add hid device: -71 [ 321.378377][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.391139][ T3616] usbhid: probe of 2-1:0.0 failed with error -71 [ 321.432967][ T3616] usb 2-1: USB disconnect, device number 14 [ 321.528481][ T2990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.537048][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.544540][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 321.668376][ T1235] bond0 (unregistering): Released all slaves [ 321.715738][ T2990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.726086][ T2990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.739154][ T2990] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.748680][ T2990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.776222][ T2990] usb 4-1: config 0 descriptor?? [ 322.408717][ T2990] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 322.431906][ T2990] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 322.525858][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.534135][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.567006][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.597883][ T2990] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 322.668713][ T26] audit: type=1326 audit(1726820081.714:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f19ef9 code=0x7fc00000 [ 322.761162][ T26] audit: type=1326 audit(1726820081.714:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5fd9f19ef9 code=0x7fc00000 [ 323.101464][ T2990] usb 4-1: USB disconnect, device number 8 [ 323.230064][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.248933][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.324952][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.350637][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.408941][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.443964][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.467446][ T6341] device veth0_vlan entered promiscuous mode [ 323.509321][ T6341] device veth1_vlan entered promiscuous mode [ 324.418178][ T26] audit: type=1326 audit(1726820083.354:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f19ef9 code=0x7fc00000 [ 324.497333][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.589575][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.829537][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.030035][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.226416][ T6341] device veth0_macvtap entered promiscuous mode [ 325.449362][ T6341] device veth1_macvtap entered promiscuous mode [ 325.908681][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.066041][ T6594] loop3: detected capacity change from 0 to 512 [ 326.125044][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.125068][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.125085][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.125106][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.125119][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.125130][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.125143][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.125161][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.125173][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.167097][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.231853][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.232017][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.232135][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.232215][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.232358][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.232484][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.232562][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.232622][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.232723][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.232803][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.244844][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.291069][ T6341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.291572][ T6341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.291761][ T6341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.292575][ T6341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.492202][ T3615] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 326.761192][ T3615] usb 3-1: Using ep0 maxpacket: 32 [ 326.871467][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.872152][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.872719][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.873261][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.873772][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.874302][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.901689][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.901733][ T3615] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 326.901759][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.906228][ T6594] EXT4-fs (loop3): Test dummy encryption mode enabled [ 326.910126][ T1304] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 326.913726][ T3615] usb 3-1: config 0 descriptor?? [ 326.934177][ T6594] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.672: invalid block [ 327.238975][ T6594] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.672: couldn't read orphan inode 11 (err -117) [ 327.303652][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 327.311490][ T6594] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 327.344390][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.362798][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.405541][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.427145][ T6397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.447986][ T6397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.486106][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.186325][ T6611] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 329.198651][ T6613] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 329.456531][ T3615] usbhid 3-1:0.0: can't add hid device: -71 [ 329.469363][ T3615] usbhid: probe of 3-1:0.0 failed with error -71 [ 329.480691][ T3615] usb 3-1: USB disconnect, device number 14 [ 332.523155][ T6653] loop3: detected capacity change from 0 to 128 [ 332.600171][ T6653] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 332.638868][ T6653] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038 (0x7fffffff) [ 332.667281][ T6648] loop4: detected capacity change from 0 to 1024 [ 332.871159][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 335.231095][ T3617] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 335.511209][ T3617] usb 4-1: Using ep0 maxpacket: 32 [ 335.641488][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.674893][ T3617] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 335.718956][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.757359][ T3617] usb 4-1: config 0 descriptor?? [ 336.615167][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 336.895063][ T6696] netlink: 52 bytes leftover after parsing attributes in process `syz.0.694'. [ 338.011158][ T3617] usbhid 4-1:0.0: can't add hid device: -71 [ 338.017172][ T3617] usbhid: probe of 4-1:0.0 failed with error -71 [ 338.042598][ T3617] usb 4-1: USB disconnect, device number 9 [ 338.300053][ T6717] loop1: detected capacity change from 0 to 16 [ 338.465232][ T6717] erofs: Unknown parameter '1844674407370955161500000000000000000000000' [ 338.729192][ T1235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.842159][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 338.899288][ T1235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.920300][ T1235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.739388][ T1304] Bluetooth: hci4: command 0x0409 tx timeout [ 341.310958][ T1235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.421245][ T4663] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 341.658607][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 341.861375][ T4663] usb 1-1: Using ep0 maxpacket: 32 [ 342.012262][ T4663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.186034][ T4663] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 342.410852][ T4663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.421797][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 342.554145][ T4663] usb 1-1: config 0 descriptor?? [ 342.571764][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.593323][ T6758] loop3: detected capacity change from 0 to 512 [ 342.594626][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.632331][ T6712] device bridge_slave_0 entered promiscuous mode [ 342.675422][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.721310][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.811275][ T1304] Bluetooth: hci4: command 0x041b tx timeout [ 342.822637][ T6712] device bridge_slave_1 entered promiscuous mode [ 343.042459][ T6758] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 343.217890][ T6758] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038 (0x7fffffff) [ 343.757727][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.026800][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.541235][ T4663] usbhid 1-1:0.0: can't add hid device: -71 [ 344.547330][ T4663] usbhid: probe of 1-1:0.0 failed with error -71 [ 344.665236][ T6712] team0: Port device team_slave_0 added [ 344.714380][ T6712] team0: Port device team_slave_1 added [ 344.764410][ T4663] usb 1-1: USB disconnect, device number 14 [ 345.545765][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.565862][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.578795][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 345.787457][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.877679][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.899885][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 345.901344][ T4663] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 345.917377][ T4663] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 345.926665][ T4663] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 345.951401][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.048686][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.219978][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 346.234934][ T6712] device hsr_slave_0 entered promiscuous mode [ 346.243725][ T6712] device hsr_slave_1 entered promiscuous mode [ 346.250786][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.262982][ T6712] Cannot create hsr debugfs directory [ 346.971531][ T3693] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 347.354268][ T3693] usb 2-1: Using ep0 maxpacket: 32 [ 347.471304][ T3693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.501117][ T3693] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 347.547995][ T3693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.589404][ T3693] usb 2-1: config 0 descriptor?? [ 347.651362][ T1235] device hsr_slave_0 left promiscuous mode [ 347.668593][ T1235] device hsr_slave_1 left promiscuous mode [ 347.691266][ T1304] Bluetooth: hci4: command 0x0419 tx timeout [ 347.715220][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.731261][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.770768][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.791394][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.813761][ T1235] device bridge_slave_1 left promiscuous mode [ 347.840358][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.851898][ T1235] device bridge_slave_0 left promiscuous mode [ 347.858102][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.897828][ T1235] device veth1_macvtap left promiscuous mode [ 347.906992][ T1235] device veth0_macvtap left promiscuous mode [ 347.924954][ T1235] device veth1_vlan left promiscuous mode [ 347.930881][ T1235] device veth0_vlan left promiscuous mode [ 348.366017][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 348.423766][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 348.437613][ T6840] loop3: detected capacity change from 0 to 512 [ 348.462124][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.480140][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.543093][ T6840] EXT4-fs (loop3): 1 orphan inode deleted [ 348.561289][ T6840] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 348.583364][ T6840] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 348.679316][ T1235] bond0 (unregistering): Released all slaves [ 349.199894][ T6712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.232548][ T6712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.244955][ T6712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.255559][ T6712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.385748][ T3693] usbhid 2-1:0.0: can't add hid device: -71 [ 349.400932][ T3693] usbhid: probe of 2-1:0.0 failed with error -71 [ 349.433730][ T3693] usb 2-1: USB disconnect, device number 16 [ 349.447846][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 349.642168][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 349.676732][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.729477][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.745138][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.942584][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.173104][ T7] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 350.211532][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.302192][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.342410][ T7] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 350.476490][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.483669][ T5547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.679159][ T7] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 351.025812][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.046934][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.099128][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.350185][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.357341][ T5547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.756876][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.845404][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.856034][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.931806][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.981936][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.002180][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.031922][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.058292][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.087301][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.119863][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.152690][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.284709][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.722180][ T3617] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 353.122154][ T3617] usb 3-1: Using ep0 maxpacket: 32 [ 353.251356][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.286161][ T3617] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 353.312077][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.319534][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.334613][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.364268][ T3617] usb 3-1: config 0 descriptor?? [ 353.418082][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.875208][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.893178][ T6938] loop3: detected capacity change from 0 to 512 [ 353.903576][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.993609][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.012570][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 354.026325][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.046368][ T6712] device veth0_vlan entered promiscuous mode [ 354.063577][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.080074][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.114959][ T6712] device veth1_vlan entered promiscuous mode [ 354.133569][ T6938] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 354.162020][ T6938] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 354.246782][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.269933][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.304145][ T6712] device veth0_macvtap entered promiscuous mode [ 354.373045][ T6712] device veth1_macvtap entered promiscuous mode [ 354.451939][ T6962] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 354.495131][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.531198][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.564177][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.575842][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.586476][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.597016][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.606907][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.617754][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.628012][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.962403][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.991173][ T3617] usbhid 3-1:0.0: can't add hid device: -71 [ 355.997386][ T3617] usbhid: probe of 3-1:0.0 failed with error -71 [ 356.016064][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.025156][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.051898][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.079839][ T3617] usb 3-1: USB disconnect, device number 15 [ 356.088808][ T6973] loop1: detected capacity change from 0 to 512 [ 356.102618][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.175143][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.193216][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.213982][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.264098][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.290504][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.323121][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.359162][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.175514][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.405358][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.526530][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.551114][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.570328][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.613483][ T6712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.661252][ T6712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.690530][ T6712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.727650][ T6712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.227942][ T6973] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,nojournal_checksum,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 358.441271][ T6973] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038 (0x7fffffff) [ 358.472680][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.493465][ T6973] EXT4-fs error (device loop1): ext4_remount:5854: comm syz.1.752: Abort forced by user [ 358.521672][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 358.554972][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.588707][ T6973] EXT4-fs (loop1): Remounting filesystem read-only [ 359.057476][ T27] INFO: task syz-executor:4549 blocked for more than 143 seconds. [ 360.488625][ T27] Not tainted 5.15.167-syzkaller #0 [ 361.296806][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.767618][ T6712] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 361.785767][ T5547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.971815][ T5547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.010819][ T27] task:syz-executor state:D stack:20312 pid: 4549 ppid: 1 flags:0x00004004 [ 362.020662][ T27] Call Trace: [ 362.031375][ T27] [ 362.034411][ T27] __schedule+0x12c4/0x45b0 [ 362.038997][ T27] ? cpufreq_update_util+0x94/0x250 [ 362.047008][ T27] ? update_curr+0x10c/0xa50 [ 362.051751][ T27] ? release_firmware_map_entry+0x190/0x190 [ 362.057759][ T27] schedule+0x11b/0x1f0 [ 362.062226][ T27] schedule_timeout+0xac/0x300 [ 362.067086][ T27] ? console_conditional_schedule+0x40/0x40 [ 362.073552][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 362.079632][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 362.085350][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 362.090655][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 362.096349][ T27] do_wait_for_common+0x2d9/0x480 [ 362.101790][ T27] ? console_conditional_schedule+0x40/0x40 [ 362.107720][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 362.114353][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 362.119527][ T27] wait_for_completion+0x48/0x60 [ 362.124575][ T27] kthread_stop+0x178/0x580 [ 362.129091][ T27] ext4_stop_mmpd+0x43/0xb0 [ 362.134092][ T27] ext4_put_super+0xac5/0x1060 [ 362.138878][ T27] ? ext4_drop_inode+0x250/0x250 [ 362.143917][ T27] generic_shutdown_super+0x136/0x2c0 [ 362.149310][ T27] kill_block_super+0x7a/0xe0 [ 362.154252][ T27] deactivate_locked_super+0xa0/0x110 [ 362.159687][ T27] cleanup_mnt+0x44e/0x500 [ 362.164539][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 362.169853][ T27] task_work_run+0x129/0x1a0 [ 362.174557][ T27] exit_to_user_mode_loop+0x106/0x130 [ 362.179975][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 362.185847][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 362.191752][ T27] do_syscall_64+0x47/0xb0 [ 362.196196][ T27] ? clear_bhb_loop+0x15/0x70 [ 362.200876][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.206837][ T27] RIP: 0033:0x7f346cdb8227 [ 362.211365][ T27] RSP: 002b:00007ffd0257f828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 362.219783][ T27] RAX: 0000000000000000 RBX: 00007f346ce29a14 RCX: 00007f346cdb8227 [ 362.228105][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0257f8e0 [ 362.237657][ T27] RBP: 00007ffd0257f8e0 R08: 0000000000000000 R09: 0000000000000000 [ 362.246008][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd02580960 [ 362.255021][ T27] R13: 00007f346ce29a14 R14: 0000000000030fa9 R15: 00007ffd025809a0 [ 362.263077][ T27] [ 362.266118][ T27] INFO: task kmmpd-loop2:5397 blocked for more than 146 seconds. [ 362.266780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.282219][ T27] Not tainted 5.15.167-syzkaller #0 [ 362.288038][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.296873][ T27] task:kmmpd-loop2 state:D stack:27480 pid: 5397 ppid: 2 flags:0x00004000 [ 362.306204][ T27] Call Trace: [ 362.309490][ T27] [ 362.312628][ T27] __schedule+0x12c4/0x45b0 [ 362.317360][ T27] ? release_firmware_map_entry+0x190/0x190 [ 362.331890][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 362.339386][ T27] ? print_irqtrace_events+0x210/0x210 [ 362.345090][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 362.353932][ T27] schedule+0x11b/0x1f0 [ 362.358205][ T27] percpu_rwsem_wait+0x3e1/0x470 [ 362.364111][ T27] ? read_lock_is_recursive+0x10/0x10 [ 362.369613][ T27] ? __percpu_down_read+0x100/0x100 [ 362.375247][ T27] ? percpu_up_write+0x90/0x90 [ 362.380144][ T27] __percpu_down_read+0xd0/0x100 [ 362.380309][ T6397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.392469][ T27] ? kmmpd+0x292/0xa90 [ 362.394397][ T6397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.397645][ T27] write_mmp_block+0x2f0/0x390 [ 362.411577][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.417123][ T27] kmmpd+0x292/0xa90 [ 362.425197][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 362.431590][ T27] ? write_mmp_block_thawed+0x590/0x590 [ 362.437189][ T27] kthread+0x3f6/0x4f0 [ 362.446192][ T27] ? write_mmp_block_thawed+0x590/0x590 [ 362.452280][ T27] ? kthread_blkcg+0xd0/0xd0 [ 362.456889][ T27] ret_from_fork+0x1f/0x30 [ 362.461547][ T27] [ 362.464593][ T27] [ 362.464593][ T27] Showing all locks held in the system: [ 362.472726][ T27] 1 lock held by ksoftirqd/0/14: [ 362.477674][ T27] 1 lock held by khungtaskd/27: [ 362.483607][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 362.495287][ T27] 2 locks held by kworker/1:2/1074: [ 362.530262][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 362.557659][ T27] #1: ffffc90004d57d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 362.576288][ T27] 4 locks held by kworker/u4:5/1235: [ 362.583267][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 362.593880][ T27] #1: ffffc9000547fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 362.603925][ T27] #2: ffffffff8da261d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 362.613544][ T27] #3: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 362.624587][ T27] 2 locks held by getty/3334: [ 362.629293][ T27] #0: ffff88814b021098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 362.639350][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 362.650318][ T27] 3 locks held by kworker/1:4/3619: [ 362.656550][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 362.667048][ T27] #1: ffffc900032f7d20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 362.677162][ T27] #2: ffffffff8c924130 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 362.687320][ T27] 3 locks held by kworker/1:6/3693: [ 362.692604][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 362.703215][ T27] #1: ffffc90003357d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 362.715568][ T27] #2: ffff8880578a3240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 362.726349][ T27] 3 locks held by kworker/0:11/3976: [ 362.732320][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 362.743023][ T27] #1: ffffc900047a7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 362.756565][ T27] #2: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 362.767606][ T27] 1 lock held by syz-executor/4549: [ 362.772869][ T27] #0: ffff88805dfa20e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 362.783174][ T27] 1 lock held by kmmpd-loop2/5397: [ 362.788281][ T27] #0: ffff88805dfa2460 (sb_writers#5){++++}-{0:0}, at: kmmpd+0x292/0xa90 [ 362.797062][ T27] [ 362.799570][ T27] ============================================= [ 362.799570][ T27] [ 362.816488][ T27] NMI backtrace for cpu 0 [ 362.820824][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 362.828808][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 362.838863][ T27] Call Trace: [ 362.842138][ T27] [ 362.845062][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 362.849742][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 362.855382][ T27] ? panic+0x860/0x860 [ 362.859462][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 362.864582][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 362.869522][ T27] ? __wake_up_klogd+0xd5/0x100 [ 362.874384][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 362.880536][ T27] ? _printk+0xd1/0x120 [ 362.884701][ T27] ? panic+0x860/0x860 [ 362.888774][ T27] ? __wake_up_klogd+0xcc/0x100 [ 362.893620][ T27] ? panic+0x860/0x860 [ 362.897696][ T27] ? __rcu_read_unlock+0x92/0x100 [ 362.902744][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 362.908809][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 362.914791][ T27] watchdog+0xe72/0xeb0 [ 362.918953][ T27] kthread+0x3f6/0x4f0 [ 362.923001][ T27] ? hungtask_pm_notify+0x50/0x50 [ 362.928007][ T27] ? kthread_blkcg+0xd0/0xd0 [ 362.932579][ T27] ret_from_fork+0x1f/0x30 [ 362.936995][ T27] [ 362.940837][ T27] Sending NMI from CPU 0 to CPUs 1: [ 362.946243][ C1] NMI backtrace for cpu 1 [ 362.946252][ C1] CPU: 1 PID: 6397 Comm: kworker/u4:18 Not tainted 5.15.167-syzkaller #0 [ 362.946267][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 362.946276][ C1] Workqueue: bat_events batadv_nc_worker [ 362.946294][ C1] RIP: 0010:check_preemption_disabled+0x63/0x110 [ 362.946314][ C1] Code: 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c9 49 89 f6 49 89 ff 65 4c 8b 25 1d 0e ce 75 41 f6 44 24 2f 04 [ 362.946326][ C1] RSP: 0018:ffffc90003027a88 EFLAGS: 00000046 [ 362.946337][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffc90003027b03 [ 362.946347][ C1] RDX: 0000000000000002 RSI: ffffffff8a8b3da0 RDI: ffffffff8ad904c0 [ 362.946358][ C1] RBP: ffffc90003027be8 R08: dffffc0000000000 R09: fffffbfff1bd2c16 [ 362.946369][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000604f64 [ 362.946379][ C1] R13: 0000000000000246 R14: ffffc90003027b50 R15: dffffc0000000000 [ 362.946406][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 362.946419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.946430][ C1] CR2: 0000001b3031fffc CR3: 0000000074fa7000 CR4: 00000000003506e0 [ 362.946443][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.946452][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.946461][ C1] Call Trace: [ 362.946466][ C1] [ 362.946471][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 362.946488][ C1] ? read_lock_is_recursive+0x10/0x10 [ 362.946504][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 362.946527][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 362.946543][ C1] ? nmi_handle+0xf7/0x370 [ 362.946559][ C1] ? check_preemption_disabled+0x63/0x110 [ 362.946576][ C1] ? default_do_nmi+0x62/0x150 [ 362.946591][ C1] ? exc_nmi+0xa8/0x100 [ 362.946606][ C1] ? end_repeat_nmi+0x16/0x31 [ 362.946623][ C1] ? check_preemption_disabled+0x63/0x110 [ 362.946641][ C1] ? check_preemption_disabled+0x63/0x110 [ 362.946659][ C1] ? check_preemption_disabled+0x63/0x110 [ 362.946677][ C1] [ 362.946681][ C1] [ 362.946686][ C1] lock_release+0x5c1/0x9a0 [ 362.946702][ C1] ? rcu_lock_release+0x5/0x20 [ 362.946717][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 362.946733][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 362.946750][ C1] batadv_nc_worker+0x239/0x5b0 [ 362.946769][ C1] process_one_work+0x8a1/0x10c0 [ 362.946791][ C1] ? worker_detach_from_pool+0x260/0x260 [ 362.946808][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 362.946825][ C1] ? kthread_data+0x4e/0xc0 [ 362.946839][ C1] ? wq_worker_running+0x97/0x170 [ 362.946854][ C1] worker_thread+0xaca/0x1280 [ 362.946878][ C1] kthread+0x3f6/0x4f0 [ 362.946891][ C1] ? rcu_lock_release+0x20/0x20 [ 362.946906][ C1] ? kthread_blkcg+0xd0/0xd0 [ 362.946920][ C1] ret_from_fork+0x1f/0x30 [ 362.946940][ C1] [ 362.948682][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 363.245374][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 363.253335][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 363.263460][ T27] Call Trace: [ 363.266720][ T27] [ 363.269630][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 363.274295][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 363.279907][ T27] ? panic+0x860/0x860 [ 363.283967][ T27] panic+0x318/0x860 [ 363.287847][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 363.293465][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 363.299603][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 363.304781][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 363.310832][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 363.316969][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 363.323122][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 363.329269][ T27] watchdog+0xeb0/0xeb0 [ 363.333414][ T27] kthread+0x3f6/0x4f0 [ 363.337464][ T27] ? hungtask_pm_notify+0x50/0x50 [ 363.342491][ T27] ? kthread_blkcg+0xd0/0xd0 [ 363.347098][ T27] ret_from_fork+0x1f/0x30 [ 363.351509][ T27] [ 363.354848][ T27] Kernel Offset: disabled [ 363.359199][ T27] Rebooting in 86400 seconds..